In order to protect the security of the workstation system, I believe many people have mastered many coups about the security settings of the workstation system! However, with the official release of the Vista system, the number of workstations with Vista installed on the LAN is increasing. Many of the security settings we have mastered in the past have almost failed for the Vista workstation system, so in order to protect the Vista workstation system. For security, we also need to master some new security setup techniques. This is not the case. The following are some of the Vista workstation security measures that have contributed to you. On the surface, it looks normal and very simple. However, the specific setting process of these security measures is not the same as what we usually see. I hope you can Better protection of the Vista workstation system with the help of these security measures. 1. Let the online neighbors not find "I" We know that in the workstation system of Windows XP and above, the network neighbor will search and display other workstations in the LAN in the default state; however, for those who save For workstations with important privacy information, they certainly don't want to be automatically searched and displayed by their online neighbors. In order to allow the network neighborhood to find its own workstation, we can take a variety of methods to hide the local workstation; for the Vista workstation system, we can use the system to disable the network discovery function to hide the local workstation Here, the following are specific hidden steps: First log in to the Vista workstation system as a system administrator, and right-click the "Network" icon in the system desktop, and execute the "Properties" command from the pop-up shortcut menu. In the subsequent interface, find the "Share and Discover" setting item. Under this setting item, we will see many setting options for network sharing;
Secondly click on the right side of "Network Discovery" Use the down arrow button to open the settings interface, select the “Close Network Discovery” option, and click the “Apply” button to complete the above settings and restart the workstation system. This will prevent other workstations in the LAN from passing. Find the "shadow" of the Vista workstation in the Network Neighborhood window.Of course, you need to remind all friends that once the network discovery function that comes with the Vista system is turned off, the Vista workstation itself cannot see other workstations through the online neighbor window.
2, refuse others to arbitrarily Ping "I" Good to use the Windows system's own Ping command, you can effectively test the network connectivity of the LAN; however, there are some people with ulterior motives in the LAN are often free to use the command to the LAN Packet information is continuously sent to search for the target they need. In order to prevent others from arbitrarily pinging "I", I believe that most people will use the Ping command to test the connectivity of the local workstation by setting a firewall or enabling local security policies. However, in workstations with Vista, we can use the following The method is to achieve the purpose of refusing others to ping "I" at random: First open the "Start" menu of the Vista workstation system, select the "Settings" /"Control Panel" command in turn, and then click in the control panel window that pops up. System and Maintenance project, select the “Administrative Tools” icon in the subsequent interface, then double-click the “Advanced Security Windows Firewall” item in the management tool window to open the firewall setting interface of Vista system; secondly, left in the setting interface In the side display area, we will find the "Inbound Rules" option and the "Outbound Rules" option. When other workstations use the Ping command to test the local workstation, the test packet information is externally entered into the local workstation, so we should Click this "Inbound Rules" option, then click the "New Rule" item in the display area on the right side of the corresponding option setting page, open the new rule creation wizard setting interface as shown in Figure 2, select the "Custom" item At the same time, click the "Next" button; then use the mouse to select the "All Programs" item in the settings interface, then select the "ICMPv4" item in the pop-up protocol type setting box, and then click "Next" Button, when the wizard window pops up prompt to select the connection condition, we must select the "Block Connection" item, then set the specific working environment that applies the parameter setting according to the prompt, and finally take a suitable name for the newly created communication rule; After completing all the above setup operations, restart the Vista workstation system, so that other workstations on the LAN cannot use the ping command to test the network connectivity of the Vista workstation. In this case, the security of the Vista workstation system is certain. The degree can be guaranteed. 3. Prohibit access to public folders In order to facilitate LAN workstations to share communication files with each other, the Vista workstation system specifically provides us with a public folder function, and the public folder is automatically shared by default; that is, Even if we don't set any folders on the workstation to be shared, other workstations on the LAN can access a shared folder called "public" in the Vista workstation through the Network Neighborhood window. In order to prevent illegal users in the LAN from peeking at the contents of the "public" shared folder, we can set the sharing status of the "public" shared folder in the Vista workstation system. The following is the specific closing step: First Log in to the Vista workstation system as the system administrator, and right-click the "Network" icon in the system desktop, and execute the "Properties" command from the pop-up shortcut menu to open the "Share and Discover" settings interface of the local workstation. Second, find the public folder option in the settings interface, and click the down arrow button in the right area of the option with the mouse, select the "Disable sharing" item in the setting interface that pops up, and click "Apply" Button, and finally restart the workstation system, so that other workstations can not access the "public" shared folder in the Vista workstation system. 4. Close some dangerous shared projects that are enabled by default. Open Vista Optimizer (click here to download the latest version), click on “Security Optimization” above, and then click “Network Sharing” on the left to check the following items. and save the settings a bit, as shown below: